Email Infrastructure Setup: Domains, Inboxes, Rotation
The plumbing behind every cold outbound operation. Set it up right once and it runs for months.
Infrastructure Before Copy
Email infrastructure takes 3-4 weeks to set up properly. Copy takes 2-3 hours. Start infrastructure on Day 1 and write your sequences while domains warm up. Teams that skip infrastructure and launch campaigns on their primary domain learn this lesson the expensive way when their main business email gets flagged for spam.
The components: sending domains, mailboxes, DNS authentication, outbound tool, warm-up, and monitoring. Each one has specific requirements. Skip any component and the system breaks. See the deliverability guide for DNS configuration and the warm-up guide for volume ramp schedules.
Capacity Planning
Your target daily volume determines everything else: how many domains, how many mailboxes, what outbound tool plan, and total monthly cost.
200 emails/day: 3 domains, 6 mailboxes (2 per domain). This handles a single-rep outbound operation or a startup's first cold email campaign. Monthly cost: $27/month domains + $43/month mailboxes + $30-97/month outbound tool = $100-167 total.
500 emails/day: 5 domains, 10 mailboxes. Standard for a 2-3 person GTM team. Monthly cost: $45/month domains + $72/month mailboxes + $97-177/month outbound tool = $214-294 total.
1,000 emails/day: 8-10 domains, 16-30 mailboxes. Requires dedicated ops attention. Use Instantly Growth ($97/month) or Smartlead Scale ($79/month). Monthly cost: $400-600 total.
2,000+ emails/day: 15+ domains, 30+ mailboxes. Enterprise operation. Requires Instantly Hypergrowth ($197/month) or equivalent. Dedicated warm-up infrastructure. Monthly cost: $800-1,500. At this volume, consider splitting across two outbound tools to reduce platform risk.
Buffer: Always provision 20-30% more capacity than you need. When a domain gets blacklisted or a mailbox hits reputation issues, you need instant failover without reducing campaign volume.
Domain Purchasing
Naming strategy: Buy domains that look like natural brand extensions, not outbound infrastructure.
Tier 1 (best): getacme.com, acmehq.com, tryacme.com, hiacme.com. These look like marketing landing pages. Recipients who notice the domain won't immediately think "cold email."
Tier 2 (acceptable): acme.io, acme.co, acmeapp.com. Slightly less natural but still professional. .io works well for tech audiences.
Avoid: acme-sales.com, acme-outreach.com, acme-team.com. These signal cold email to both spam filters and prospects. Also avoid .xyz, .info, .online, and other cheap TLDs that carry spam associations.
Registrar: Cloudflare ($8.57/year for .com, at-cost pricing) or Namecheap ($9-12/year). Both include free WHOIS privacy. Register all domains under a single organizational account for easy management. You'll be managing 5-15 domains within 6 months.
Domain aging: New domains need a minimum 72-hour aging period before any email activity. Some practitioners recommend 7-14 days. During this period, set up a simple landing page on each domain (company name, one-line description, contact link). This establishes the domain as a legitimate web property, not a throwaway email domain.
Mailbox Provisioning
Google Workspace Business Starter ($7.20/user/month): The default choice for cold outbound. Excellent integration support with Instantly, Smartlead, Lemlist, and most other tools. Google Postmaster Tools provides the best deliverability monitoring. OAuth connection eliminates app password security issues.
Microsoft 365 Business Basic ($6/user/month): Good alternative for Outlook-heavy audiences. Slightly better deliverability to corporate Outlook inboxes. Weaker Postmaster tooling compared to Google. Consider mixing: run 60% Google Workspace and 40% Microsoft 365 across your domains for provider diversification.
Profile completion: Real first and last names. Job title matching your outbound persona. Company name. Profile photo (use a real headshot, not a stock photo). Bio/about section. Email signature with name, title, company, phone number, and website URL. Incomplete profiles look automated. Spam filters check profile completeness.
Security: Enable 2FA on every mailbox. Use a password manager (1Password, Bitwarden) for all credentials. Never share passwords in Slack or email. Grant outbound tool access via OAuth, not app passwords. If a team member leaves, rotate credentials on all connected mailboxes immediately.
Inbox Rotation
Instantly: Connect mailboxes via Google OAuth or Microsoft OAuth. Enable "Smart Sending" which distributes sends based on mailbox reputation, not just round-robin. Set per-mailbox daily limits (50-75 cold/day recommended). The system automatically routes around any mailbox approaching its limit.
Smartlead: Connect via OAuth. Enable the "Auto-rotate" feature. Smartlead's rotation considers mailbox warm-up status and recent send volume. Set campaign-level limits and per-mailbox limits. Smartlead handles the distribution.
Lemlist: Campaign-level rotation. Each campaign draws from a pool of connected mailboxes. Less granular than Instantly or Smartlead but sufficient for smaller operations (under 500/day).
Round-robin works for most teams. Advanced rotation strategies (reputation-weighted, time-zone-based) add complexity without proportional benefit until you pass 1,000 emails/day. Start simple. Optimize later.
DNS Configuration Step-by-Step
For each sending domain, configure these four DNS records before connecting any outbound tool. Each record takes 24-48 hours to propagate, so do this immediately after domain purchase.
SPF (TXT record): Create a single TXT record: v=spf1 include:_spf.google.com include:spf.instantly.ai ~all. Replace the includes with your actual email provider and outbound tool. Merge all services into one record. Multiple SPF records break authentication. Validate with MXToolbox's SPF lookup after propagation.
DKIM (TXT record): Generate in Google Workspace Admin Console (Apps, Gmail, Authenticate email) or Microsoft 365 Defender. Add the generated TXT record to DNS. Return to the admin panel and activate signing. Validate with mail-tester.com.
DMARC (TXT record): Start with: v=DMARC1; p=none; rua=mailto:dmarc@yourdomain.com. This monitors without affecting delivery. After 2-4 weeks of clean data, move to p=quarantine. See the deliverability guide for the full DMARC progression.
Custom tracking domain (CNAME record): Create a CNAME: track.yourdomain.com pointing to your outbound tool's tracking server. For Instantly: custom.instantly.ai. For Smartlead: custom.smartlead.ai. This isolates your tracking reputation from other senders on shared domains.
Reply Handling
Centralized monitoring: All replies flow into your outbound tool's dashboard. Instantly and Smartlead both provide unified inboxes that aggregate replies across all mailboxes. This prevents replies from falling through cracks across 10+ mailboxes.
CRM integration: Push positive replies (interested, meeting requests) to your CRM automatically. Native integrations: Instantly has HubSpot and Salesforce connectors. Smartlead integrates via webhook. For custom workflows, use Make or n8n to route replies based on content: interested replies create CRM deals, meeting requests trigger calendar booking links, objections enter a follow-up queue.
Out-of-office handling: Your outbound tool should auto-detect out-of-office replies and pause the sequence until the person returns. Instantly and Smartlead both handle this natively. Without it, you waste sequence steps on empty inboxes.
Bounce handling: Hard bounces (invalid email) get removed from all campaigns immediately. Soft bounces (full inbox, temporary issue) get retried 2-3 times over a week. If the soft bounce persists, remove the contact. Hard bounce rates above 1% indicate a data quality problem in your enrichment pipeline.
Security and Documentation
Password management: Store all domain registrar, email, and outbound tool credentials in a team password manager. No passwords in spreadsheets, Slack messages, or email. One compromised credential can take down your entire sending infrastructure.
Access control: OAuth over app passwords for all outbound tool connections. If a tool doesn't support OAuth, evaluate whether it's worth the security risk. Revoke OAuth access for any tool you stop using.
Centralized registration: All domains under one organizational Cloudflare or Namecheap account. All mailboxes under one Google Workspace or Microsoft 365 organization. Scattered registration across personal accounts creates a management nightmare when you need to rotate domains or update DNS.
Documentation: Create a spreadsheet listing every domain, its DNS configuration status, connected mailboxes, warm-up status, current daily volume, and performance metrics. Update weekly. When a team member needs to troubleshoot a deliverability issue at 10 PM, this document saves hours. Keep it in your password manager or a shared drive with restricted access.
Outbound Tool Pricing Comparison
Instantly Growth ($30/month): 1,000 active contacts, 5,000 emails/month, unlimited email accounts. Built-in warm-up, basic analytics, and smart sending rotation. Best for single-rep operations or teams just starting cold outbound. The unlimited email accounts at this price point make Instantly hard to beat for small teams.
Instantly Hypergrowth ($77.6/month): 25,000 active contacts, 100,000 emails/month. A/B testing, advanced analytics, and priority support. The sweet spot for most GTM teams running 200-500 emails/day across persona-segmented campaigns.
Instantly Light Speed ($286.3/month): 500,000 emails/month, 100,000 contacts uploaded. For large-scale operations. API access and custom integrations. Only justified at 1,000+ emails/day across multiple product lines or client accounts.
Smartlead Basic ($39/month): 2,000 active leads, unlimited email accounts. Better rotation logic than Instantly's lower tiers. Slightly weaker analytics but strong deliverability features. Auto-rotating mailbox assignment based on reputation scores.
Smartlead Pro ($94/month): 30,000 active leads, global block list, webhooks, and API access. The webhook integration is Smartlead's strongest feature. Connect to Make or n8n for advanced routing without native CRM integrations.
Lemlist Email Pro ($55/month per seat): 3 sending accounts per seat, unlimited contacts. Best personalization features in the market: custom images, dynamic landing pages, and LinkedIn touch integration. Higher per-seat cost limits scaling, but the personalization capabilities drive higher reply rates for Director and IC persona campaigns.
Recommendation by team size: Solo GTM Engineer: Instantly Growth ($30/month). 2-3 person team: Instantly Hypergrowth ($77.6/month). 5+ person team or agency: Smartlead Pro ($94/month) + Lemlist for high-value persona campaigns.
Common Infrastructure Mistakes
Using your primary domain for cold email. When your primary domain's reputation gets damaged by cold outbound (and it will if you send enough volume), your company's regular business email suffers. Every employee's emails start landing in spam. Use separate sending domains that look like brand extensions but isolate risk from your primary domain.
One domain for all mailboxes. Five mailboxes on one domain means one blacklisting event takes down your entire operation. Spread mailboxes across 3-5 domains so a single domain issue only affects 20-30% of your capacity. The $9/year per additional domain is cheap insurance.
No reserve domains. When an active domain gets blacklisted, you need a ready replacement within 24 hours. Without a reserve domain already warmed up, you lose 3-4 weeks of capacity while the new domain goes through warm-up. Keep 1-2 reserve domains in warm-up-only mode at all times.
Skipping profile completion. Empty Google Workspace profiles (no photo, no title, no signature) trigger automated spam detection. Inbox providers check sender profile completeness. A mailbox with a name, title, company, photo, and full signature sends trust signals that incomplete profiles don't.
Not planning for scale. Teams that start with 2 domains and 4 mailboxes and then need to triple their volume in 30 days can't. Warm-up takes 3-4 weeks. Plan infrastructure 4-6 weeks ahead of your projected sending needs. If you expect to scale from 200 to 500 emails/day in Q3, start warming additional domains in early Q2.
Manual domain management. Without a centralized tracking document, teams lose track of which domains are active, which are warming, and which need DNS updates. By the time you're managing 8+ domains, the tracking spreadsheet is a critical operational document. Build it from Day 1.
Infrastructure Setup Checklist
Complete this before launching any cold outbound campaign:
1. Capacity plan defined: target daily volume, required domains, required mailboxes. 2. Domains purchased from Cloudflare or Namecheap (Tier 1 naming: getbrand.com, brandhq.com). 3. Domains aged for 72+ hours before any email activity. 4. DNS configured for every domain: SPF (merged single record), DKIM (2048-bit), DMARC (start with p=none). 5. Custom tracking domain CNAME set for each sending domain. 6. Mailboxes provisioned: 2-3 per domain, Google Workspace or Microsoft 365. 7. Profile completed on every mailbox: name, title, photo, signature. 8. Manual test emails confirmed landing in inbox at Gmail, Outlook, and Yahoo. 9. Warm-up connected and started at 5/day per mailbox (Week 1 schedule). 10. Outbound tool connected via OAuth with per-mailbox daily limits configured. 11. Reply handling set up: unified inbox, CRM integration, out-of-office detection. 12. Domain tracking spreadsheet created with DNS status, warm-up phase, daily volume, and performance for every domain.
Frequently Asked Questions
How much per month?
5-domain setup: $4-5/month domains, $72/month Google Workspace (10 mailboxes), $30-97/month outbound tool. Total: $106-174/month for 500-750 emails/day.
Google Workspace or Microsoft 365?
Google has slight edge: better Postmaster Tools, more outbound tool integrations. Microsoft fine for Outlook-heavy audiences.
How many mailboxes?
Each handles 50-75 cold/day. For 300/day: 4-6 mailboxes. For 500/day: 7-10. Spread across domains.
Single domain, many mailboxes?
Don't. One blacklist takes all mailboxes down. Multiple domains isolate risk. $9/year per domain buys significant resilience.
When to add more?
When existing mailboxes run 80%+ capacity for 2+ weeks. Plan 4-6 weeks ahead for warm-up time.
Source: State of GTM Engineering Report 2026 (n=228). Salary data combines survey responses from 228 GTM Engineers across 32 countries with analysis of 3,342 job postings.